Information disclosure in Cisco Webex_social

CVE-2013-1107

The search function in Cisco Webex Social (formerly Cisco Quad) allows remote authenticated users to read files via unspecified parameters, aka Bug ID CSCud40235.

Vulnerability class: Information Disclosure

EPSS: 0.002 (37.0th percentile) — read the EPSS interpretation.

Affected products

Cisco Webex_social
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

20130113 Cisco Webex Social Information Disclosure Vulnerability (x_refsource_CISCO, vendor-advisory, Vendor Advisory)